The Controller of your personal data is:

Folonari Giancarlo (Mandostan) — Sole Proprietorship (Italian "ditta individuale")

VAT number: 14370950967

Registered address: Via della Moscova 46/3, 20121 Milan (MI), Italy

Certified email (PEC): giancarlo.folonari@pec.fiscozen.it

Email: giancarlo.folonari@gmail.com

In connection with your use of the site and any purchases made, we collect:

• Identification and contact information (first name, last name, email address, phone number, shipping and billing address)
• Order data (products purchased, amounts, date and time of the transaction)
• Payment data, handled directly by our payment processor Stripe (we do not store card details on our own systems)
• Browsing data and technical cookies required for the site to function

Your data is processed to:

• Manage and fulfil orders, including shipping of products
• Comply with tax, accounting and invoicing obligations
• Respond to customer support requests
• Prevent fraud and ensure the security of transactions
• Send order-related communications (confirmations, shipping updates)

Processing is based on:

• Performance of a contract (fulfilment of your purchase order)
• Legal obligation (invoicing, tax compliance)
• Consent, for any promotional or marketing communications (optional and revocable at any time)

Your data may be shared with:

• Stripe Inc., for online payment processing
• Couriers and shipping companies, for product delivery
• Tax advisors and accountants, for accounting compliance
• Public authorities, where required by law

Some providers (e.g. Stripe) may process data outside the European Union. In such cases, transfers take place in accordance with the safeguards required by the GDPR, through Standard Contractual Clauses approved by the European Commission.

Order data is kept for as long as required by Italian tax and civil law (typically 10 years for accounting records). Browsing data is kept for shorter periods, based on its technical purpose.

At any time you may exercise the rights set out in Articles 15–22 of the GDPR: access, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, write to giancarlo.folonari@gmail.com or to the PEC address above.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

The site uses technical cookies necessary for it to function (e.g. cart management) and, where present, third-party cookies (e.g. for Stripe checkout or analytics tools). For more details, see our Cookie Policy.

We reserve the right to update this Privacy Policy. Any changes will be published on this page along with the date of the last update.

Note: this is a draft intended as a starting point. We recommend a review by a lawyer or privacy consultant before publication, in particular regarding any third-party cookies, marketing, and international data transfers actually in use.